Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/dly1iQdExKMfOOA7DKTQuiw9EuY.roa
File: dly1iQdExKMfOOA7DKTQuiw9EuY.roa (raw, json)
Hash identifier: p5ZDmXVw/vo09gbYKnL264cPpjM/eoHvm8oX7mqvbe8=
Subject key identifier: 76:5C:B5:89:07:44:C4:A3:1F:38:E0:3B:0C:A4:D0:BA:2C:3D:12:E6
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 0195A9DB81EEB1FBF064C9585BED6A9AEDA6
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/dly1iQdExKMfOOA7DKTQuiw9EuY.roa
Signing time: Tue 18 Mar 2025 15:24:49 +0000
ROA not before: Tue 18 Mar 2025 15:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21155
IP address blocks: 80.84.224.0/19 maxlen: 19
81.4.64.0/19 maxlen: 19
81.4.96.0/22 maxlen: 22
81.4.112.0/22 maxlen: 22
81.4.116.0/22 maxlen: 22
83.96.128.0/17 maxlen: 17
85.158.248.0/22 maxlen: 22
85.158.252.0/23 maxlen: 23
91.142.240.0/20 maxlen: 20
91.142.244.0/23 maxlen: 23
91.142.252.0/23 maxlen: 23
91.142.254.0/23 maxlen: 23
91.216.162.0/24 maxlen: 24
185.95.68.0/22 maxlen: 22
193.242.119.0/24 maxlen: 24
2001:828::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Mar 2025 08:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:db:81:ee:b1:fb:f0:64:c9:58:5b:ed:6a:9a:ed:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Mar 18 15:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=765cb5890744c4a31f38e03b0ca4d0ba2c3d12e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:1f:f1:ac:38:d5:90:34:55:54:4f:e9:7b:
64:ae:35:34:8a:91:9f:9e:57:bc:dd:a6:74:34:cf:
d7:02:24:6a:c1:92:71:1c:91:59:82:b3:4e:0a:a6:
b2:5a:54:00:3b:e4:53:da:eb:d7:5e:9a:e1:06:30:
c7:db:4d:9e:08:8d:cd:35:22:e8:7c:fa:e3:26:2c:
92:6e:84:8d:5d:67:2d:78:f1:f5:f9:d1:f1:4b:e3:
12:d9:57:31:95:91:45:16:a5:e1:70:c8:4d:14:f3:
34:71:b1:7b:55:29:a5:1f:ca:d4:61:6e:e9:e9:e9:
48:8b:89:e4:b0:67:c4:05:c1:62:93:d9:d6:35:bb:
f4:a1:be:37:23:ee:f0:d3:be:fe:74:1d:84:a2:0c:
87:85:8e:28:e1:d3:ab:90:74:b6:b8:c0:f9:c2:58:
71:0a:56:94:ff:db:e1:92:e1:10:58:d3:db:e3:54:
aa:90:6a:72:c6:01:ab:d1:c1:5b:75:f0:13:70:28:
23:e3:30:4e:9d:c5:f0:7c:bd:8c:f8:1a:c1:84:61:
21:14:da:bc:c6:35:fd:a2:38:50:22:b0:ff:82:0e:
e6:78:89:6e:a0:c7:55:e8:ca:98:23:7b:ca:83:51:
2f:b1:81:7a:b1:74:af:eb:a7:8f:a1:01:a9:f2:16:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5C:B5:89:07:44:C4:A3:1F:38:E0:3B:0C:A4:D0:BA:2C:3D:12:E6
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/dly1iQdExKMfOOA7DKTQuiw9EuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.224.0/19
81.4.64.0-81.4.99.255
81.4.112.0/21
83.96.128.0/17
85.158.248.0-85.158.253.255
91.142.240.0/20
91.216.162.0/24
185.95.68.0/22
193.242.119.0/24
IPv6:
2001:828::/32
Signature Algorithm: sha256WithRSAEncryption
92:33:7e:f5:17:97:b9:a5:1b:7f:7d:2d:00:6f:d3:1a:65:58:
ae:e9:c9:85:6e:97:55:fb:d9:d7:cb:ae:6a:c8:83:b1:2c:7e:
a4:ed:58:9b:21:fd:04:3d:be:cf:b5:2e:85:a5:76:fa:23:3d:
3d:a3:f9:6c:14:9b:a2:63:0e:c3:9f:e3:bb:f2:ba:cc:0d:61:
86:33:b7:86:35:ec:22:04:49:ce:ed:4a:71:97:ef:b3:c8:aa:
7b:4e:d5:d4:4d:cf:4a:f1:bf:49:1a:23:63:1c:5c:bf:09:9c:
46:4e:cd:32:0d:1a:e4:18:2d:70:c0:88:3d:29:fd:81:53:9b:
81:d4:ec:2d:27:1c:8d:39:39:4a:49:47:10:39:f4:40:7b:6b:
d0:4a:59:2e:b4:18:82:b1:7f:9f:b9:ce:8e:4f:be:5f:46:ae:
c9:81:6f:c6:56:c2:f9:7c:8d:95:55:c8:f3:23:25:91:d0:b4:
97:14:57:2c:b8:cf:ce:46:e1:05:de:e2:a9:a1:d2:b7:50:ce:
e6:04:d9:45:78:83:82:b8:b4:7d:f9:ac:26:2c:eb:b0:30:d5:
8f:59:63:34:65:68:8e:65:53:8d:92:3d:dc:be:7e:d4:0b:71:
4c:7e:7a:99:9b:9f:33:6c:f4:87:71:25:f2:6c:e1:c8:fa:aa:
64:24:3a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:59 2025 by rpki-client